Last updated: 29/10/2026

Who is responsible for your information

Apodosis Ltd decides how the personal information described here is used, which makes it the controller under UK data protection law. Apodosis Ltd is registered in England and Wales, company number 17383827. Its registered office is 9 Wellington Drive, Stratford-upon-Avon, CV37 7HJ.

To ask anything about your information, or to use any of the rights below, email richard@apodosis.co.uk or write to the registered office.

What this notice covers

This notice covers visits to www.apodosis.co.uk, enquiries by email, phone or the booking link, Apodosis's own business development, and the running of client work.

It does not cover information Apodosis handles on a client's behalf as part of the work itself. There, the client decides how the information is used, and the client's own privacy notice applies.

What Apodosis holds and where it comes from

When you get in touch or book a call: your name, job title, organisation, business email address, phone number, and whatever you choose to tell Apodosis.

When Apodosis contacts you first: your name, job title, employer, business email address and business phone number. These come from public sources, such as your employer's website, the Companies House register and professional networking profiles.

For clients: the contact details and correspondence needed to run the work and to invoice for it.

In every case: records of emails and meetings with you.

From the website: the technical information set out in the cookie policy.

Please do not send sensitive information, such as health details, in an enquiry. Apodosis does not need it.

You do not have to give Apodosis any information. Without contact details it cannot reply to you.

Why Apodosis uses it, and on what basis

To reply to an enquiry and arrange a call. Basis: legitimate interests, in answering people who contact the business.

To contact businesses that may benefit from its services. Basis: legitimate interests, in finding new clients. Apodosis emails limited companies and other incorporated bodies only, never sole traders or ordinary partnerships. Every email names the sender and tells you how to opt out.

To run client work. Basis: legitimate interests, in delivering the work agreed with your employer and keeping in touch about it.

To keep accounting and tax records. Basis: legal obligation.

To keep a record that you have asked not to be contacted. Basis: legitimate interests, in making sure that request is respected.

To measure visits to the website with analytics cookies. Basis: your consent, given or refused through the cookie banner.

Your right to object

You can object at any time to Apodosis using your information to contact you about its services, and it will stop. Reply to any email from Apodosis, or email richard@apodosis.co.uk.

You can also object to any other use that relies on legitimate interests. Apodosis will then stop unless it has a compelling reason to continue, and will tell you what that reason is.

Who it is shared with

Apodosis uses these service providers, which handle information only on its instructions:

• Microsoft, for email and files

• HubSpot, for contact records

• Calendly, for booking calls

• Squarespace, for hosting the website and its analytics

Financial records are shared with Apodosis's accountants, who act as a controller in their own right. Information may also be disclosed where the law requires it.

Apodosis does not sell personal information, and does not share it for advertising.

Transfers outside the UK

HubSpot stores Apodosis's contact records in its European data centre. HubSpot, Calendly and Squarespace are US companies, and some information may be processed in the United States. Each is certified under the UK Extension to the EU-US Data Privacy Framework, which the UK Government recognises as giving adequate protection. Their terms with Apodosis also include the UK's approved transfer clauses, which apply if the framework does not.

How long it is kept

Enquiries and contacts who do not become clients: 24 months from the last contact, then deleted.

Clients: for the length of the work and 6 years after it ends.

Accounting records: 6 years from the end of the financial year they relate to.

A request not to be contacted: Apodosis keeps your name, email address, organisation and the date of the request for as long as it contacts businesses, so that the request is respected. Deleting it would put you at risk of being contacted again.

Your rights

You can ask Apodosis to:

• give you a copy of your information

• correct it

• delete it

• restrict how it is used

• stop using it, as set out under Your right to object

• give it to you in a portable format, where the law provides for that

Where you have given consent, you can withdraw it at any time. That does not affect anything done before you withdrew it.

Apodosis will reply within one month. There is normally no charge. It may need to confirm who you are before acting.

Complaints

If you are unhappy with how Apodosis has handled your information, please tell Apodosis first at richard@apodosis.co.uk. Apodosis will acknowledge your complaint within 30 days and deal with it without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk.